Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jffp-ghx6-2288

Опубликовано: 17 сент. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Version 1.8.0 and prior have this vulnerability. Executable files could be uploaded to certain directories using hard-coded bearer authorization, allowing remote code execution.

Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Version 1.8.0 and prior have this vulnerability. Executable files could be uploaded to certain directories using hard-coded bearer authorization, allowing remote code execution.

EPSS

Процентиль: 88%
0.04226
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-798

Связанные уязвимости

CVSS3: 9.8
nvd
больше 3 лет назад

Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to  1.9.03.009 have this vulnerability. Executable files could be uploaded to certain directories using hard-coded bearer authorization, allowing remote code execution.

CVSS3: 9.8
fstec
больше 2 лет назад

Уязвимость промышленной системы управления энергопотреблением DIAEnergie, связанная с использованием предустановленных учетных данных, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 88%
0.04226
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-798